This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft File: A17DC55845B70106CEB3A498496454BE640F44AB.mft (raw, json) Hash identifier: BPACsZQcl3RhymnyZufei8bXBqq/8WUg/AgtG1U7uT4= Subject key identifier: FF:95:DA:BC:B1:03:D0:06:38:F1:6A:B5:F1:25:74:03:B7:27:3B:BF Authority key identifier: A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB Certificate issuer: /CN=A17DC55845B70106CEB3A498496454BE640F44AB Certificate serial: 2D42248F428EE48A7CE5947AA0D1A2687227B757 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft Manifest number: 0349 Signing time: Wed 03 Dec 2025 07:01:16 +0000 Manifest this update: Wed 03 Dec 2025 06:56:16 +0000 Manifest next update: Sat 06 Dec 2025 10:43:16 +0000 Files and hashes: 1: 3130332e35322e36312e302f32342d3234203d3e20313339343237.roa (hash: w37lq4KLk82r5xEboaEt3iVD5XeAKizKn7xI0fxGzNY=) 2: 3130332e33312e3234392e302f32342d3234203d3e20313339343237.roa (hash: UUMwnrDm1U+Qlo7/OuS/vhT11bByA22cTFKLWGZAlwc=) 3: 3130332e35322e36302e302f32342d3234203d3e20313338383831.roa (hash: KQJJinQjYftmYqVjX+nqcS8sYhsgrCSBnaTeyaDu8pU=) 4: 3130332e33312e3234382e302f32332d3233203d3e20313339343237.roa (hash: XIFOVvwjJ/s65US6Rpd5t4HWg3Q6vfbVPqm9v9PqOGU=) 5: 3130332e33312e3234382e302f32342d3234203d3e20313339343237.roa (hash: 9cImEVaK5OCHdSpqIXpI9zJWU7YI86G2S7wFTBzx17w=) 6: A17DC55845B70106CEB3A498496454BE640F44AB.crl (hash: TsHQk5xuI6wxAD52o8dYybGPytt3ASdDNul8xIWxt3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Dec 2025 10:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:42:24:8f:42:8e:e4:8a:7c:e5:94:7a:a0:d1:a2:68:72:27:b7:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A17DC55845B70106CEB3A498496454BE640F44AB Validity Not Before: Dec 3 06:56:16 2025 GMT Not After : Dec 6 10:43:16 2025 GMT Subject: CN=FF95DABCB103D00638F16AB5F1257403B7273BBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fb:0e:c7:61:20:18:cf:da:b6:71:49:37:ba: 91:39:1b:eb:3f:31:bf:9f:4a:74:ba:ca:71:d9:76: 2a:ff:6d:c7:77:d0:3e:a6:02:df:b7:b7:1a:57:97: 88:0f:8a:b5:f7:00:d4:20:fb:b9:24:6c:74:d6:08: 5f:f9:d8:a4:fb:28:1e:1e:bc:24:8c:e4:f0:7c:36: 28:5b:44:0e:f1:e4:42:13:a1:93:3a:a6:c4:7e:ac: de:a3:65:f6:f1:2f:f0:5e:cf:db:a1:6c:b7:11:5b: 92:a9:4c:23:1a:d9:27:ce:18:8e:16:52:47:3d:3b: 92:24:e0:ca:74:4f:e4:ba:18:70:49:09:5f:c4:a7: 75:e1:33:19:50:41:58:3e:85:56:84:4d:72:c8:be: e9:37:19:58:96:e7:53:71:b9:b6:be:dc:b2:d8:4a: 1b:b4:11:a1:ff:c5:d6:f9:30:14:08:ee:8a:52:11: 10:77:6e:76:d1:7b:9c:25:b2:a7:c9:cd:22:af:3c: c8:bb:fd:f4:54:8e:98:85:2c:27:48:de:50:d0:08: 85:33:e4:d7:90:76:4d:fd:88:68:18:db:ce:8f:f1: 55:e4:44:a2:00:69:bf:b1:a4:47:4b:e3:c8:72:74: b9:35:55:24:d2:6e:c3:99:ec:ac:90:dc:a4:2e:01: 40:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:95:DA:BC:B1:03:D0:06:38:F1:6A:B5:F1:25:74:03:B7:27:3B:BF X509v3 Authority Key Identifier: keyid:A1:7D:C5:58:45:B7:01:06:CE:B3:A4:98:49:64:54:BE:64:0F:44:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A17DC55845B70106CEB3A498496454BE640F44AB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d61b8ccc-6c22-424e-9614-8ab8ad28849c/0/A17DC55845B70106CEB3A498496454BE640F44AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:4d:89:26:2c:5b:0a:ea:a6:41:23:57:11:a8:aa:8d:e6: 9e:1c:50:17:cc:70:5b:7d:d0:0f:56:68:85:9b:07:df:6a:00: 10:9b:12:63:b5:7d:b5:6c:3d:ff:cd:e5:85:1a:a0:a0:64:ca: 96:d3:38:20:e8:07:1d:3c:66:08:be:3b:bc:c8:4b:56:46:b2: e9:b9:46:07:4c:64:c1:5d:fb:58:9a:df:5d:fe:17:70:1f:62: ba:78:d9:bc:df:a8:7c:5d:ca:54:2a:15:fc:04:59:a8:28:f4: b9:5c:75:0d:f3:bf:1c:26:d7:b1:36:84:cb:6f:5a:98:09:ee: d2:73:31:97:5a:85:48:12:f9:ac:82:75:92:0d:62:83:d3:6c: 86:d7:92:64:7c:84:9e:c1:ba:80:46:50:72:6a:e7:79:44:47: 3f:26:0a:a1:fb:a1:57:25:a8:cb:3e:fb:0d:bd:05:7e:42:33: a8:72:bd:f6:ec:f7:8b:33:60:c3:ec:32:db:2a:a0:f1:70:8f: 5c:dc:ea:33:47:65:be:c3:ba:62:58:a3:e3:ba:c1:35:cc:69: 29:04:d9:a1:ad:37:31:69:0e:91:90:07:6d:6d:00:fd:07:d9: e0:bc:9e:b8:ae:48:74:b2:9d:50:82:8b:17:20:9e:da:05:f7: d5:d0:e1:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUIkj0KO5Ip85ZR6oNGiaHInt1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2 NDBGNDRBQjAeFw0yNTEyMDMwNjU2MTZaFw0yNTEyMDYxMDQzMTZaMDMxMTAvBgNV BAMTKEZGOTVEQUJDQjEwM0QwMDYzOEYxNkFCNUYxMjU3NDAzQjcyNzNCQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+w7HYSAYz9q2cUk3upE5G+s/ Mb+fSnS6ynHZdir/bcd30D6mAt+3txpXl4gPirX3ANQg+7kkbHTWCF/52KT7KB4e vCSM5PB8NihbRA7x5EIToZM6psR+rN6jZfbxL/Bez9uhbLcRW5KpTCMa2SfOGI4W Ukc9O5Ik4Mp0T+S6GHBJCV/Ep3XhMxlQQVg+hVaETXLIvuk3GViW51Nxuba+3LLY Shu0EaH/xdb5MBQI7opSERB3bnbRe5wlsqfJzSKvPMi7/fRUjpiFLCdI3lDQCIUz 5NeQdk39iGgY286P8VXkRKIAab+xpEdL48hydLk1VSTSbsOZ7KyQ3KQuAUApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/5XavLED0AY48Wq18SV0A7cnO78wHwYDVR0j BBgwFoAUoX3FWEW3AQbOs6SYSWRUvmQPRKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjFiOGNjYy02YzIyLTQyNGUtOTYxNC04YWI4YWQyODg0OWMvMC9BMTdEQzU1ODQ1 QjcwMTA2Q0VCM0E0OTg0OTY0NTRCRTY0MEY0NEFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0QkU2NDBG NDRBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDYxYjhjY2MtNmMyMi00MjRlLTk2 MTQtOGFiOGFkMjg4NDljLzAvQTE3REM1NTg0NUI3MDEwNkNFQjNBNDk4NDk2NDU0 QkU2NDBGNDRBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUyTYkmLFsK6qZBI1cRqKqN5p4cUBfMcFt9 0A9WaIWbB99qABCbEmO1fbVsPf/N5YUaoKBkypbTOCDoBx08Zgi+O7zIS1ZGsum5 RgdMZMFd+1ia313+F3AfYrp42bzfqHxdylQqFfwEWago9LlcdQ3zvxwm17E2hMtv WpgJ7tJzMZdahUgS+ayCdZINYoPTbIbXkmR8hJ7BuoBGUHJq53lERz8mCqH7oVcl qMs++w29BX5CM6hyvfbs94szYMPsMtsqoPFwj1zc6jNHZb7DumJYo+O6wTXMaSkE 2aGtNzFpDpGQB21tAP0H2eC8nriuSHSynVCCixcgntoF99XQ4SY= -----END CERTIFICATE-----Generated at Wed Dec 3 14:44:34 2025 by rpki-client